Questions tagged [man-in-the-middle]

A man-in-the-middle attack (MiTM) is an attack against a communication protocol where the attacker relays and modifies messages in transit. The parties believe they are talking to each other directly, but in fact both are talking to each other via the attacker in the middle.

Filter by
Sorted by
Tagged with
46
votes
5answers
8k views

Are all these attacks possible with WiFi MitM or is it over-hyped nonsense?

My dad sent me this video asking if he should be worried about this? The video shows: a wifi AP broadcasting an airport's wifi name security researcher seeing the sites the victim browses security ...
0
votes
2answers
67 views

Is there anything I can do past SSL pinning to secure my connection?

My goal is to prevent man-in-the-middle (MITM) attacks through proxies. I've implemented SSL pinning, which has helped significantly, but I'm wondering if there's anything more I can do that's worth ...
0
votes
1answer
72 views

Is it possible to intercept and modify a wireless TCP transmission?

Given three parties (all in the same LAN): A client, a server, and a MITM. The client and server communicate wirelessly, and don't encrypt their messages. The MITM can see the messages, but question ...
0
votes
0answers
56 views

Outside Router MitM Attack

I'm trying intercept my router's ACS requests which are behind HTTPS. I don't think my router validates certificates so it is possible to do a MitM attack. I'm using a debian installed laptop with two ...
2
votes
0answers
46 views

MitM Attack Fails on Home Wireless Router

I am currently trying to perform a MitM attack on my home wireless network to get a better understanding on how this attack works. I can successfully perform this attack on a NAT network on some ...
1
vote
0answers
45 views

How to get on a list of sites that handle financial information? [closed]

Until about a year ago, I was working for one of the big tech giants. During my time there, I noticed that the IT department would do a MITM attack on any website that employees access. i.e. if you ...
0
votes
0answers
18 views

Sniffing Traffic Android App [duplicate]

So, imagine that a vulnerable app provides a login interface. This login sends the user's credentials to the App's server to authenticate the user. However this is done via HTTP, therefore not secure. ...
1
vote
1answer
56 views

Security Risk of outbound web calls [closed]

What possible risks/attack vectors could be introduced be allowing my server application to make outbound calls to a 3rd party REST API? The 3rd party REST API is off premises and owned and operated ...
6
votes
1answer
250 views

esim vs sim card, what is more secure?

I can read many different attack vectors like swapping and porting but not sure if all those attacks are relevant about eSIM, can you please explain what are a security risk and attack vectors that ...
8
votes
1answer
190 views

Is a self-signed certificate from my ISP-provided router a security threat?

I recently found out that in order to log on to the web-based administration tool on my ISP-provided router, I need to accept a self-signed certificate it offers. I did a bit of reading and it sounds ...
1
vote
0answers
114 views

Am i being MITMed?

Lately i was experiencing weird behavour from some big websites. More specifically, when i normally tried to connect to facebook, i would be greeted with this login page: I have placed these with ...
1
vote
1answer
98 views

Is SSL-strip still viable as a method of attack?

Seeing as SSL-strip works by intercepting redirects and links to HTTPS, is this still a viable MITM attack now that most (all?) up to date browser go for HTTPS by default? Is there an alternative more ...
1
vote
1answer
81 views

Should one not give path parameters in rest urls to avoid man in the middle attacks?

Recently I attended a workshop were the presenter explained securing rest APIs. One of the things he recommended to avoid man in the middle attacks was to not send IDs in the URLs (i.e. not sending ...
1
vote
4answers
290 views

Possible attacks over SSH

Let's say there is a target machine T, to which I want to connect. T is in a private network so I need to connect to it via some proxy machine P (which is connected to that network). For this reason I ...
0
votes
0answers
47 views

Are there LTE attacks besides aLTEr?

Background: I understand that most attacks on cell network-subscribed individuals rely on exploiting the poor authentication of GSM/2G comms. And if the victim is on LTE, then the next best strategy ...
0
votes
0answers
60 views

How does an IMSI catcher “impersonate” a base station/cell tower?

On reading about IMSI catchers, I keep seeing that they "impersonate" a real cell tower or "base station" so that the phone drops its signal-carried data on that machine while on its way to the ...
10
votes
3answers
427 views

Can network traffic between Docker containers be sniffed?

On normal networks, it is a security risk to send plaintext data, since attackers can sniff or even manipulate all traffic. Encryption is required for secure communication. When using Docker ...
3
votes
0answers
46 views

Capture macOS/IOS system HTTPS packets

I tried to analyze the https traffic of apps on my MacBook and iPhone with Charles with SSL proxy (I use HTTP proxy for IOS and installed and trusted Charles certificate). I managed to decrypt most ...
0
votes
1answer
44 views

Verifying installers downloaded over HTTPS

Many developers distribute software over a HTTPS connection and recommend that their users verify the integrity of the executable by comparing a hash or PGP signature. Both the executable and the hash ...
1
vote
1answer
134 views

What Data Does an ISP Store? [closed]

Sorry for being so general, but I know my ISP logs connections to others and all. I'm just questioning whether they keep any physical data that was over a HTTPS connection. Learned about how ISPs also ...
2
votes
1answer
106 views

If I accept a root Cert what am I opening myself up to?

If I connect to a WIFI AP and it wants to install a root cert. They read my HTTPS traffic, Right? Does using OpenSSH on my cell phone to my home router help protect me? Or can this traffic be ...
0
votes
0answers
46 views

Western Digital My Cloud - Website GUI & Security

I am trying to figure out if using the Website "files.mycloud.com" is exposing my files to being intercepted at a central point. I see that there is an HTTPS connection with valid cert for *.mycloud....
0
votes
1answer
100 views

MITM setup using airmon-ng, iptables, and isc-dhcp server

I want to set up a MITM-scenario as an exercise for myself. My setup looks like this: Internet <--------> Laptop <----------> Client At this stage I just want to route the traffic from my AP ...
0
votes
2answers
133 views

Is MITM possible for Google services (TLS/SSL) as of today?

I personally trust Google in terms of security but I'm not sure whether man-in-the-middle (MITM) attacks against Google services AS OF TODAY possible or not. As far as I know, Google uses some ...
1
vote
1answer
80 views

Using mitmproxy to analyze mobile application and iOS network data

I followed a guide where the author connected Windows PC and iPhone to his home WiFi network. He installed mitmproxy and ran mitmweb.exe on PC. On iPhone he went to wifi settings and set a manual ...
2
votes
2answers
151 views

Man-in-the-middle attack (ACME / Let's Encrypt) on Authorization Key?

By looking at https://letsencrypt.org/how-it-works/, I got the feeling that a man-in-the-middle attack might be possible in the 'Domain Validation' phase. During that phase, the admin is asked to e....
1
vote
1answer
122 views

detecting MITM attacker on WIFI

I have read this: Can I detect a MITM attack? My question is very simple, since a MITM attacker consumes double number of packets, is possible to identify him, isn't it?
2
votes
1answer
85 views

What are the security concerns about using unencrypted TCP keepalive with TLS?

In my software both the server and the client sends unencrypted TCP keepalive messages to be able to detect the broken pipe within a reasonable time. It also uses TLS 1.3 encryption with OpenSSL 1.1.1....
1
vote
0answers
74 views

Track HTTP(S) Network calls being made by an Android Device

I am planning to track the Network calls being made by apps and the website of an Android Device. I have used the Burp Suite tool for tracking the network calls. Until now the Android Device and the ...
1
vote
1answer
59 views

Protection against tampering

Recently, I have downloaded a game from Steam. I wondered whether it was somehow possible to alter the data of the game and replace it with malware without the computer it was sent to noticing. ...
0
votes
1answer
97 views

Phishing urls from shnpoc.net/McAfee?

I was looking into my websites traffic and found few entries from a subdomain for shnpoc.net domain. And when I looked into it, it was transparent proxying my website. On checking further, I found ...
3
votes
5answers
226 views

Is it possible to safely connect to the internet using a malicious router?

If you connect to the internet using a router that's controlled by a hacker, is there some way you can safely surf the internet without getting hacked? By using a vpn and firewall maybe? Does it make ...
1
vote
2answers
90 views

Monitoring the HTTP(S) calls being made from android App

I want to test for security vulnerabilities in an Android App and hence want to monitor all HTTP(S) calls being made from an Android App. I have setup BurpSuit in my Laptop and have also set up the ...
1
vote
0answers
51 views

Experiencing ssh host key mismatch with x2goclient

x2goclient (on Windows) shows a different ssh host key hash than the output of ssh-keygen -lf /etc/ssh/ssh_host_key_$cypher_ley.pub -E md5 on the host. Connecting with other ssh clients from the same ...
0
votes
0answers
36 views

How to do a SSL MITM for all programs trying to access the internet on my local Ubuntu

How to do an SSL MITM for all programs trying to access the internet on my local Ubuntu. When a program on my local machine tries to access the internet using https I would like to intercept and ...
1
vote
0answers
32 views

Geofence Process against Legitimate MitM

We are developing a solution where a door is controlled by a backend that is publicly available over the 4G network (there is no local network available at the place of deployment). The user is ...
1
vote
1answer
93 views

Is using a VPN like changing your ISP?

I am asking this question from a security perspective (not privacy) I have read that using a vpn can prevent hackers including your isp (who could be working for the government) from doing mitm ...
1
vote
3answers
125 views

MITM: Is and How is it possible to manipulate HTTP POST data sent by the host to the server

Is it and how is it possible to modify a HTTP POST parameter that is being sent by the host to a server assuming that you are in a man-in-the-middle position in a network? HOST(POST=foobar) --------> ...
42
votes
7answers
9k views

Why is the HTTP protocol more susceptible to being intercepted than the BitTorrent protocol?

I'm downloading an .iso file that is offered through the main website, which recommends users to use BitTorrent. In addition, they offer the download via HTTP using different mirror sites that belong ...
7
votes
2answers
231 views

Does cloudflare protect against BREACH attacks?

I know that enabling http compression would make a server vulnerable to the BREACH attacks. So we have disabled compression from the server side, tested and it was all good. Then we implemented ...
0
votes
1answer
59 views

Why is subject verification an effective means to detect MitM attacks in TLS? [duplicate]

Say, an attacker fakes an original server certificate by a trusted CA using a another certificate from the same CA in a Man-in-the-middle attack. Why can this be detected using subject verification on ...
1
vote
1answer
56 views

MitM to intercept SSL/TLS based on network traffic alone?

Say, an attacker wants to perform a MitM but all he has available is the network traffic between a client and a server. He has no further information about the data or certificates than what's being ...
0
votes
1answer
32 views

Need for additional verification in mutual TLS authentication with own CA

Say, the goal is to facilitate secure communication between two parties. The definition of secure is that both parties can be sure that they are actually talking to a trusted party, not somebody else ...
1
vote
2answers
93 views

Mutual TLS and Cert Pinning solving the same problem?

To prevent MITM from my app I will use cert pinning. To prevent having not approved parties communicate to my server I can use Mutal TLS, which actually accepting communication from trusted sources. ...
0
votes
0answers
63 views

Is apt-get secure against DNS Spoofing? [duplicate]

I am aware that installing and updating packages through apt-get should be fairly secure because an attacker supposedly should not be able to interfere or inject packets into the downloads as well as ...
0
votes
2answers
52 views

Would verifying the integrity of my website by comparing digest on the client side work?

So today I read about the sub-resource integrity attribute feature for browsers. And I though of using the same concept to verify the integrity of my HTML to protect against tempering by my web host ...
1
vote
3answers
154 views

Can Burp be setup to intercept traffic from client application?

I have a client application installed on my Windows computer and I want to perform a MITM on this application to inspect the traffic. I understand that Burp can do the MITM for web application, but ...
0
votes
0answers
16 views

It it possible to have Ettercap spread its work across more than one thread?

Wondering if it's possible to have Ettercap split its processing work up across more than one thread, whether by a manual "jury-rigged" abstraction layer, or if there's a way/option to have it be ...
1
vote
2answers
85 views

What are the guarantees that TLS provides without using a certificate in the scenario?

Assume a scenario where we have a modular system including: an Authentication Module (AM) which gets username and password of an internet user and issues a token for the user. User<-->AM ...
3
votes
2answers
106 views

What prevents malicious servers from spoofing mail transfer agents and/or mail delivery agents?

An email system typically consists of multiple agents: Mail user agent (MUA) Mail submission agent (MSA) Mail tranfer agent (MTA) Mail delivery agent (MDA) Evidently the 'middlemen' of this system ...